isinglass-hzd 1.14 review

isinglass-hzd is a firewall setup script designed to protect dial-up users.In normal configuration it is assumed that Ethernet interf

License: GPL (GNU General Public License) File size: 15K Developer: Vladimir Ivaschenko

0

isinglass-hzd is a firewall setup script designed to protect dial-up users.In normal configuration it is assumed that Ethernet interfaces belong to LAN and the user accesses Internet through some other interface (PPP etc).
Also only Indent requests are permitted by default, all other services on the machine are blocked. You may wish to change this, so take a look at /etc/isinglass.conf. After you think everything is ok, insert line "/usr/sbin/isinglass" into beginning of your /etc/ppp/ip-up.local script (assuming you use RedHat) and to /etc/rc.d/rc.local and you should be set.

What's New in This Release:
Added ipchains support (firewalling used in 2.1 and beyond kernels)
Added "isinglass.user" script which specifies user-defined rules ("isinglass.user" is run *AFTER* IsinGlass rules are set up)
Now defaults to deny TCP connection attempts to ports above 1023 (Responses to outgoing packets are allowed by default)